Legal

Privacy Policy

Last Updated: 14 April 2025  |  Sangha, Bangkok, Thailand

1. Data Controller

The data controller for personal information collected through this website and through our service engagements is Sangha, located at 51 Yenakat Road, Thung Maha Mek, Sathon, Bangkok 10120, Thailand. Enquiries about data matters may be sent to privacy@sanghaxxas.

2. What Data We Collect

2.1 Information you provide

When you contact the practice or engage a service, we may collect:

• Full name and contact details (email address, telephone number)
• Passport number, nationality, and visa status
• Employment information (employer name, job title, work location)
• Corporate documentation (where you are acting as an employer contact)
• Financial records required for visa eligibility assessment
• Message content submitted through the contact form on this website

2.2 Information collected automatically

When you visit this website, standard server logs may capture your IP address, browser type, referring URL, and pages visited. This information is used for security and diagnostic purposes only and is not linked to your identity.

3. How We Use Your Data

Personal data is used for the following purposes:

• Preparing and submitting permit and visa applications on your behalf
• Communicating with you about the progress of your matter
• Sending renewal reminders and compliance deadline notifications
• Responding to enquiries submitted through this website or by telephone
• Maintaining records required to support future renewals or related matters

We do not use personal data for marketing purposes without your consent. We do not sell, rent, or trade personal data to third parties.

4. Legal Basis for Processing

Processing is based on one or more of the following grounds:

• Contract performance — where data is necessary to carry out the service you have engaged
• Legitimate interest — for maintaining records, security logging, and business communications
• Legal obligation — where Thai law requires retention of certain documents
• Consent — for optional communications where you have opted in

5. Data Sharing

Personal data may be shared with the following parties, where necessary:

• The Department of Employment (Thailand) — for work permit submissions
• The Immigration Bureau (Thailand) — for visa and reporting submissions
• The Board of Investment (Thailand) — where BOI coordination is required
• Certified translation services — where document translation is required

All third parties listed above receive only the data necessary for the specific submission. We do not share data with advertising platforms or data brokers.

6. Data Retention

Documents and correspondence related to a completed matter are retained for seven years, consistent with standard professional practice in Thailand. After this period, records are securely destroyed. Enquiries that did not result in an engagement are deleted within 12 months.

7. Cookies

This website uses cookies to support basic functionality and, where consent is given, to understand how visitors use the site. You can manage cookie preferences at any time through our Cookie Policy page.

8. Your Rights

Under applicable Thai data protection law and, where relevant, the PDPA (Personal Data Protection Act B.E. 2562), you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of data we no longer have a legal basis to retain
• Object to processing based on legitimate interest
• Withdraw consent where consent was the basis for processing
• Lodge a complaint with the relevant supervisory authority (the Personal Data Protection Committee, Thailand)

To exercise any of these rights, please contact: privacy@sanghaxxas

9. Data Security

Personal data and documents are stored using access-controlled systems. Physical documents are held in a secured office with restricted access. Electronic files are protected by password controls and not stored on publicly accessible systems. In the event of a data breach that poses a risk to individuals, the relevant authority will be notified within 72 hours and affected individuals will be informed promptly.

10. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from minors. If we become aware that data from a person under 18 has been submitted, we will take steps to delete it promptly.

11. External Links

This website may contain links to external resources, including Thai government department websites. Sangha is not responsible for the privacy practices of those websites and encourages you to read their respective privacy notices.

12. Changes to This Policy

This policy may be updated from time to time to reflect changes in our practice or in applicable law. The date at the top of this page reflects the most recent revision. Where changes are material, we will notify active clients by email.

13. Contact

For questions about this policy or about your personal data, please contact: